With effect from May 2018, the role of GDPR has become very crucial for businesses running on marketplaces, eCommerce platforms, SaaS and even Cryptocurrency. It’s time, you make a checklist of compliances and get your business GDPR compliant.
The regulation applies to all the organisation either operating in EU or outside EU which processes the data of EU customers.
The regulation has been termed as the basic data fundamental rights granted to citizens which gives them more control of their personal data. GDPR was adopted by the European Union on April 2016 and came into effect on 25th May 2018.
What changes with GDPR?
Before GDPR, there was the Directive 95/46/EC which protected the free movement of customer data. But with the fall of Safe Harbor Agreement in 2010 and revelations as made by Edward Snowden, EU decided to change the policies by making it more transparent.
Getting Your Marketplace Ready for GDPR
Being non-compliant to GDPR can have huge implications and can cost you up to 4% of global turnover or €20 million or whichever is greater. Below are the few compliance checklists that you can use to make your business GDPR compliant.
Mention information regarding what data you collect, to whom you share and how you use your customer personal data.
You can use Custom Registration Fields Extension for Magento to customise the policies on your Magento Store. Admin can go to Stores > Configuration > Webkul > Customer Terms & Conditions to configure the front-end view.
Take Customers Consent
Customers can go to their Customer Dashboard > Newsletter Subscription (Check/Uncheck).
Manage Consent List
Track your customer’s list who have given consent for your newsletters or promotional messages while signing up. To view the list go to Admin Dashboard > Marketing > Newsletters Subscribers.
A cookie banner should be displayed with the option to Agree or change settings to your customer.
One such extension you can use for your Virtuemart marketplace is Joomla GDPR Compliance. After installing the extension, Admin can go to Components > GDPR Compliance > Cookie Settings (View Details) to configure the cookie and mention cookie list.
Exercise Data Rights
It’s important that you allow your customers to exercise data rights from customer dashboard. Data rights are one of the core changes made by EU in new Data Protection Regulation.
With the help of Prestashop GDPR Compliance module, you can easily allow customers to request for data deletion, rectification and downloading personal Data. Admin can set the configuration by going to Admin > Manage GDPR > GDPR General Configuration/Mail Configuration/Cookie Block.
Frequently Asked Questions
Keep your customers up to date with the most common questions and how they can access their data rights by creating a list of questions on your store. FAQs keep your customers remain acquainted with the GDPR changes on your store.
You can use Accordion FAQ Extension to create FAQs on your Magento Store. Admin can go to their Admin Dashboard > WebkulAccordionFAQ > Add/Manage FAQ.
Announce Updates and Re-Consent
The new users can now give you consent and see you policies before proceeding to buy something from your store but what about your old customers?
On you Magento Store, you can create Newsletters by going to Marketing > Newsletter Template to check out the existing template or create one.
Put the specific newsletter in Queue from Action Column. Go to Marketing > Newsletter Queue, to check the status of the newsletter as sent or pending.
Let us know in comments what techniques you have used for making your store GDPR compliant.
For any query regarding GDPR modules, you can email us at firstname.lastname@example.org